diff --git a/docs/security.md b/docs/security.md
index 14fd6d44..02853500 100644
--- a/docs/security.md
+++ b/docs/security.md
@@ -109,10 +109,10 @@ known operations; there is no arbitrary command pass-through:
 | `RestartMatrixDaemon` | `systemctl --machine=h-<name> restart hive-matrix-daemon.service` |
 
 **Container allowlist** — every request is validated against an
-allowlist before any operation: only names matching `h-<agent>` (the
-standard agent prefix), the root/bootstrap container, or the known sibling
-service containers (`hive-gateway`, `hive-forge`, `hive-matrix`,
-`hive-ci`) are accepted. Arbitrary container names are rejected.
+allowlist before any operation: only names matching the agent-name
+convention (char-validated) or the known sibling service containers
+(`hive-gateway`, `hive-forge`, `hive-matrix`, `hive-ci`) are accepted.
+Arbitrary container names are rejected.
 
 **Socket-activated** — systemd starts `hive-priv` on the first
 incoming connection (`LISTEN_FDS=1`); it is not running between calls.